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\g} (57) Abstract: The invention relates to a mechanism for maintaining a secure tunnel in a packet-based communication system. A 

O secure tunnel is established between a security gateway and a mobile terminal being located at a first address in a first network, 

O wherein the security gateway connects the first network to a second network and the mobile terminal has a second address that 

^ identifies the mobile terminal in the second network. In the gateway, the tunnel is identified based on the second address in packets 

Q destined for the mobile terminal from the second network. A change is detected in the first address of the mobile terminal and an 
update message including a new address value of the first address is sent to the security gateway. Based on the update message, the 

^ first address associated with the secure tunnel is updated in the security gateway. 
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